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CLAIMS 

1 . An apparatus having a KASUMI round for generating a fractional portion 
2 of the KASUMI cipher operably coupled to a calculation controller for 

sequencing eight rounds to produce a KASUMI output. 

2. The apparatus of claim 1, further comprising a sub-key generator, 
2 connected to the calculation controller, for producing sub-keys each round for 

use by the KASUMI round. 

3. An apparatus for performing KASUMI ciphering on a KASUMI input with 
2 a key to produce a KASUMI output, comprising: 

a KASUMI round for generating a fractional portion of the KASUMI 
4 cipher, configurable for calculation of even and odd rounds, eight rounds being 

calculated to produce the KASUMI output; 
6 memory for storing the output of the KASUMI round; and 

a selector for providing the input to the KASUMI round, the KASUMI input 
8 being selected during the first round and the contents of the memory being 
selected during subsequent rounds. 

4. The apparatus of claim 3, further comprising a sub-key generator for 
2 generating sub-keys for each round based on the key. 

5. The apparatus of claim 3, wherein the apparatus is adapted to be 
2 operable in an access point. 

6. The apparatus of claim 3, wherein the apparatus is adapted to be 
2 operable in an access terminal. 

7. The apparatus of claim 3, wherein the apparatus is adapted to be 
2 operable in a W-CDMA system. 
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8. A KASUMI round for receiving an input and producing an output, 
2 operable with a partial round calculator from which the output is produced, 

comprising: 

4 a memory for storing an intermediate value from the partial round 

calculator; and 

6 a selector for selecting between the input and the contents of the 

memory for delivery to the partial round calculator. 

9. A KASUMI round for receiving a 64-bit input and producing a 64-bit 
2 output comprising: 

an FO function; 
4 an FL function; 

an XOR gate; 
6 a first register; 

a second register for receiving the output of the XOR gate, the output 
8 being concatenated with the output of the first register to produce the 64-bit 
output; 

10 a first input mux for selecting between the upper half of the 64-bit input 

and the output of the second register under control of an input select signal, the 
12 output being received at the first register; 

a second input mux for selecting between the lower half of the 64-bit 
14 input and the output of the first register under control of the input select signal, 

the output being delivered as the second operand to the XOR gate; 
16 a first datapath mux, the output of which is delivered to the FL function, 

for selecting between the output of the first input mux and the output of the FO 
1 8 function under control of a data flow signal; 

a second datapath mux, the output of which is delivered to the FO 
20 function, for selecting between the output of the FL function and the output of 

the first register under control of the data flow signal; and 
22 a third datapath mux, the output of which is delivered as the first operand 

to the XOR gate, for selecting between the output of the FL function and the FO 
24 function under control of the data flow signal. 
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10. An FO function for receiving an input and producing an output, operable 
2 with a partial FO calculator from which the output is produced, comprising: 

a memory for storing an intermediate value from the partial FO calculator; 

4 and 

a selector for selecting between the input and the contents of the 
6 memory for delivery to the partial FO calculator. 

11. An FO function for receiving a 32-bit input and producing a 32-bit output, 
2 comprising: 

a first XOR gate for receiving a KO sub-key as a first operand; 
4 an Fl function for receiving the output of the first XOR gate; 

a second XOR gate for receiving the output of the Fl function as a first 
6 operand; 

a first register for receiving the output of the second XOR gate; 
8 a second register; 

a first input mux, the output of which is delivered as a second operand to 
10 the first XOR gate, for selecting between the upper half of the 32-bit input and 

the output of the second register under control of an input select signal; and 
12 a second input mux, the output of which is delivered as the second 

operand to the second XOR gate and the input to the second register, for 
14 selecting between the lower half of the 32-bit input and the output of the first 
register under control of the input select signal, the output being concatenated 
1 6 with the output of the second XOR gate to produce the 32-bit output. 

12. An Fl function for receiving an input and producing an output, operable 
2 with a partial Fl calculator from which an intermediate value and the output is 

produced, comprising: 
4 a memory for storing the intermediate value from the partial Fl calculator; 

and 

6 a selector for selecting between the input and the contents of the 

memory for delivery to the partial Fl calculator. 
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13. An Fl function for receiving a 16-bit input and producing a 16-bit output, 
2 comprising: 

a first register; 
4 a second register; 

a first input mux for selecting between the output of the first register and 
6 the upper nine bits of the 1 6-bit input under control of an input select signal; 

a second input mux for selecting between the output of the second 
8 register and the lower seven bits of the 16-bit input under control of the input 
select signal; 

10 an S9 function for receiving the output of the first input mux; 

a first XOR for receiving as operands the output of the S9 function and 
12 the zero-extended output of the second input mux; 

an S7 function for receiving the output of the second input mux; 
14 a second XOR for receiving as operands the truncated output of the first 

XOR and the output of the S7 function, the output being concatenated with the 
1 6 output of the first XOR to produce the 1 6-bit output; 

a third XOR, the output of which is delivered to the first register, for 
1 8 receiving as operands a first Kl sub-key and the output of the first XOR; and 

a fourth XOR, the output of which is delivered to the second register, for 
20 receiving as operands a second Kl sub-key and the output of the second XOR. 

14. A sub-key generator for receiving a key and, for each round, producing 
2 eight sub-keys, comprising: 

a first shift register, loadable with the key, left rotatable by eight bits 
4 under control of a rotate signal, four of the eight sub-keys being derived from 
the output; and 

6 a second shift register, loadable with a masked version of the key, left 

rotatable by eight bits under control of the rotate signal, four of the eight sub- 
8 keys being derived from the output. 
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15. A sub-key generator for receiving a 128-bit key and, for each round, 
2 producing eight 1 6-bit sub-keys, comprising: 

a first 128-bit shift register, loadable with the key; 
4 a second 128-bit shift register, loadable with a masked version of the 

key, the first sub-key being produced from the third highest 16 bits, the second 
6 sub-key being produced from the fourth highest 16 bits, the third sub-key being 
produced from the fifth highest 16 bits, the fourth sub-key being produced from 
8 the lowest 16 bits; 

a rotator for rotating left by one bit the contents of the first shift register 
1 0 located in highest 1 6 bits to produce the fifth sub-key; 

a rotator for rotating left by five bits the contents of the first shift register 
12 located in the second highest 16 bits to produce the sixth sub-key; 

a rotator for rotating left by eight bits the contents of the first shift register 
14 located in the third lowest 1 6 bits to produce the seventh sub-key; and 

a rotator for rotating left by 13 bits the contents of the first shift register 
16 located in the second lowest 16 bits to produce the eighth sub-key. 

16. A method for performing KASUMI ciphering comprising: 
2 for each of eight rounds: 

selecting the input for use in the calculating step during the first 
4 round; 

selecting the stored result for use in the calculating step in 
6 subsequent rounds; 

calculating a partial result; and 
8 storing the partial result in a memory; and 

delivering the stored result as the output. 
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17. The method of claim 16, wherein the calculating step comprises: 
2 when the round is odd: 

performing the FL function on the upper half of the input or stored 
4 result, as selected in the selecting step; 

performing the FO function on the output of the FL function; and 
6 XORing the output of the FO function with the lower half of the 

input or stored result, as selected in the selecting step; 
8 when the round is even: 

performing the FO function on the upper half of the stored result; 
1 o performing the FL function on the output of the FO function; and 

XORing the output of the FL function with the lower half of the 
12 stored result; 

delivering as the partial result the output of the XORing step 
14 concatenated with the upper half of the input or stored result, as selected in the 
selecting step. 

1 8. The method of claim 1 6, further comprising generating sub-keys for each 
2 round. 



1 9. A method for performing the FO function comprising: 
2 for each of three stages: 

selecting the input for use in the calculating step in the first stage; 
4 selecting the stored result for use in the calculating step in 

subsequent stages; 
6 calculating a partial result; 

storing the partial result in memory; and 
8 delivering the partial result as the output; 
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20. The method of claim 1 9, wherein the calculating step comprises: 

2 XORing the upper half of the input or stored result, as selected in the 

selecting step, with a sub-key; 
4 performing the Fl function on the output of the XORing step; 

XORing the output of the Fl function with the lower half of the input or 
6 stored result, as selected in the selecting step; and 

delivering as the partial result the upper half of the input or stored result, 
8 as selected in the selecting step, concatenated with the output of the second 
XORing step. 

21 . A method for performing the Fl function comprising: 
2 calculating a partial result using the input; 

XORing the partial result with a sub-key; 
4 storing the partial result in memory; 

calculating a second partial result using the stored result; and 
6 delivering the second partial result as the output; 

22. The method of claim 21 , wherein the calculating step comprises: 

2 performing the S9 function on the upper nine bits of the input or stored 

result; 

4 zero extending the lower 7 bits of the input or stored result; 

XORing the zero-extended input or stored result with the output of the S9 
6 function; 

perfoming the S7 function on the lower 7 bits of the input or stored result; 
8 truncating the output of the XORing step; 

XORing the truncated XOR output with the output of the S7 function; 
10 delivering as the partial result the output of the second XORing step 

concatenated with the output of the first XORing step. 

23. A method for generating sub-keys comprising: 
2 loading two sub-key shift registers; 

for each of eight rounds: 
4 deriving the sub-keys from the sub-key shift registers; and 

rotating the two sub-key shift registers left by eight bits. 
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24. The method of claim 23, wherein the loading step comprises: 
2 loading a key into the first sub-key shift register; 

masking the key; and 
4 loading the masked key into the second sub-key shift register. 

25. The method of claim 24, wherein the deriving step comprises: 

2 deriving the first sub-key from the third highest set of 16 bits of the 

second shift register; 

4 deriving the second sub-key from the fourth highest set of 16 bits of the 

second shift register; 

6 deriving the third sub-key from the fifth highest set of 16 bits of the 

second shift register; 

8 deriving the fourth sub-key from the lowest set of 16 bits of the second 

shift register; 

1 o rotating the highest set of 1 6 bits of the first shift register by one bit to the 

left to produce the fifth sub-key; 
12 rotating the second highest set of 16 bits of the first shift register by five 

bits to the left to produce the sixth sub-key; 
14 rotating the third lowest set of 16 bits of the first shift register by eight bits 

to the left to produce the seventh sub-key; and 
16 rotating the second lowest set of 16 bits of the first shift register by 

thirteen bits to the left to produce the eighth sub-key. 
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